Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File:                     eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier:          Eh73PnxagDsS8ASb5AmdePxehSD9qArjSJSBiat32A8=
Subject key identifier:   20:96:F8:45:34:D2:AB:30:E5:7C:1B:2D:CC:17:AF:7F:CE:05:07:CB
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer:       /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number:          9C
Signing time:             Tue 09 Sep 2025 06:30:49 +0000
Manifest this update:     Tue 09 Sep 2025 06:30:49 +0000
Manifest next update:     Tue 16 Sep 2025 06:30:49 +0000
Files and hashes:         1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: 671aUUfqQLGg2ZMvOve9Wet4JhtazbDCMA1KylhvzLg=)
                          2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: uf3h7x4X3w9L0qxsA/csqdSdJ4iieOaLJOms8tSWtWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
                          rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 06:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
        Validity
            Not Before: Sep  9 06:30:49 2025 GMT
            Not After : Sep 16 06:30:49 2025 GMT
        Subject: CN=68bfc999-acf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:ab:b2:02:54:bf:4f:51:be:14:52:f4:6f:
                    7d:d4:3e:77:ab:74:fa:a0:eb:98:14:dd:90:43:52:
                    c1:96:5c:4b:77:7d:73:f2:84:0b:27:45:83:a9:eb:
                    fe:48:48:0a:b3:24:60:75:ee:39:3e:33:5c:4d:cf:
                    28:9a:1b:7d:3e:cc:00:86:11:6c:a7:4d:3e:ce:55:
                    00:c6:71:c1:04:6e:7e:39:b9:94:43:37:c6:a2:a9:
                    7e:c9:de:22:4c:af:5c:05:f4:6a:0f:91:b4:3f:53:
                    60:8e:14:5d:74:a1:44:8d:36:94:75:25:6e:12:79:
                    44:1b:11:5b:78:b8:bc:e0:20:c1:3a:12:85:ba:f1:
                    23:4f:35:10:b3:21:f1:dd:63:6a:c5:0e:a8:7b:f3:
                    5d:b5:b2:cd:93:15:ae:cc:b9:0d:26:ab:80:eb:70:
                    0a:b2:50:a0:99:64:fc:fc:10:05:c5:e3:b1:2b:7c:
                    b8:cd:21:52:fb:cd:f6:0e:e6:5e:2b:34:fd:fa:ab:
                    60:e1:2e:2d:67:55:2e:96:77:97:5a:43:ec:a2:73:
                    7e:d3:35:a2:4d:4d:3a:57:fd:aa:b2:fe:63:f8:ae:
                    ad:1a:3c:e1:08:d5:e6:bb:c5:d0:38:9c:4a:32:09:
                    14:f8:ae:4d:6c:f6:0a:e5:45:3c:b6:a1:29:14:b8:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:96:F8:45:34:D2:AB:30:E5:7C:1B:2D:CC:17:AF:7F:CE:05:07:CB
            X509v3 Authority Key Identifier:
                keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:95:fa:d6:cd:d7:7e:8a:99:12:20:3d:68:5a:cf:df:41:
         b5:e6:1c:eb:e0:8c:61:bf:53:ed:37:5f:98:dd:49:ac:f8:51:
         61:5d:26:d7:77:9c:01:22:b9:d7:35:cb:e2:8c:f8:56:fc:57:
         aa:3f:4f:f3:be:11:74:2a:67:e4:d5:1c:8a:ab:2c:a3:47:f2:
         0e:88:7b:8a:4c:9b:7d:f2:a4:f3:77:87:5d:f8:4f:db:14:36:
         78:5d:4b:01:f0:b8:b1:3e:04:e5:6d:a5:1b:5b:93:50:a4:21:
         ed:23:7d:b8:0f:29:79:c4:05:21:cc:61:d7:36:f8:2b:d3:12:
         7b:22:8b:40:72:da:16:fd:59:eb:e0:60:f2:15:47:0d:40:73:
         45:01:b5:0c:26:6e:a3:85:31:4c:63:6a:8b:4d:ca:26:86:36:
         c4:50:f9:eb:cf:ac:48:cd:b6:e4:b9:15:0c:df:2c:60:8a:bf:
         ca:31:9e:e3:6f:65:13:b2:5a:20:e2:cd:7a:09:a4:31:5b:76:
         df:a7:a1:e9:de:6c:3f:c8:2b:2a:50:de:9a:01:ec:c0:48:30:
         21:f6:c1:d1:11:5e:d3:f9:2a:87:91:01:2f:07:42:9f:07:e9:
         0e:c6:fc:f8:7d:af:ca:70:a4:4a:e3:93:8a:c1:9b:05:a0:02:
         8e:38:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:13:38 2025 by rpki-client